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[0004] M53\^ 0^xm^tm^titzm^mmm^T^^-f%(D'ch^o ms 

jrem&£tlX\t*Z>o tt. m&ft±>*91tW8l<D&mmW:93ii~93n<D±X<D 

mm93a\-xmmmjKa^ m&ft±>-?9ik&mmm93btzmwimiKb& > mmt 
±>?9 1 b&mmm93n\*m%mmn$rf'$>mii>x\ ^1-5. 

[0005] £T , ^TOSff ^S93a— 93nT^jS^r^ltSMK^*^r-r2)^&f-oVN-Ctft 
0J-r5„ H^fT^^m, ^a^F^SMK^ffr&U ^0*®™#SMKiSr1>v 
-^92^j£{fi-5o ^^0^^1^933-9311^^**^^^^ 
HlKa, 1Kb, • • -IKnl£g-3#, W*iI4'ffi^SMK£ll£-JHfcU W#Rg-5§-;£E 
nc (iKa, SMK) , Enc (1Kb, SMK) , • • • , Enc (IKru SMK) &%£&LtzmZm^ 
^*ii c f^iii¥ENCSMKG=Enc(lKa, SMK) | | Enc (1Kb, SMK) | |--- 
Enc(IKn, SMK) h\^XW^>^.\t ^«93a-93n^[n]f:J"tiE{f -T6 0 " I 

I B «^-a-fB-^-cfc«?,Enc(K, v)n^itm^m^x^xv^m^it\^M<D 
m^x*nm-z>o ^#fp^mi(^VNT«, Bt^^ii^^ENcsM 

KGO^i:$rjiaS'J1t^(EMM) , mmmKa—TKn<DZ.b&^X?~~ i(Km) % ^iit 
F^«SMK(Dsli:^!7-^Si (Kw) ^tv^D^-eV ^ 0 B£^§->f *il * P^SiPEN 
CSMKG^{fbfc»Ogm^m93a-93n{i, Hf^kfeii^Ffl^PENCSM 

m mm3a-93nx&m<D&m*mmsMK%&m'rz>^ttfm3kz>o 
[0006] &.\^ ±x<D^m =g®93a-93n-e, m^^^^y^u^t-r^m^m V ^ 
**^K£*#«;^^o^Tf&p^5o ^92«, **^sK&m&u 

S^f^S93a-93ni:**bTV^^*ii'^•r^«iSMK{^^# > ^:CD#*^SK^B|f 
-S^fcU ^rOBt-^^CEnc(SMK, SK) £H£4Hb* ^ENCSKtL-C»<D:g{f ^ 
g93a-93n-[R]{t-CBBff i"^o B£#te^SlENCSK£gjf Lfclg^OgTO 
©93a-93nte, *ii + F^SMK{cS<5#Bf ^b^SlENCSKOm^t:^ 
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Sr^9^//H* (Ks) \ B&#fb#iitteNCSK<^£*:#^rfflf # (ECM) frWP 
£j*U *©«f^b^«^CSK«»OSflr3S«93a-93n^fifl|-r5ifclC 
[0007] 438, «BS^rfe^9itt, #»*IH^MK$rJH^S£fcfcJ:o"C, £>5#Stf> 
jfc5„ gfi ^® 93a<D iBgu^^3g{&M^#*bi-*#£-fcov ^ 

Trawls,, *t> &m*mmsMK&mit\zi¥f&u w&mymmsMKZ-y— 

/<92K36m-r5o -t^fK £f§ ^«93a^&*WLTV^BU*^a£|&<£-C 
(D«S»Kb~IKnO^;h^;ft£^T, *<0#ii*ra«SMK<DI*^fb«tfTV\ 
^<D#Bt^Enc(IKb, SMKh •••,Enc(IKn, SMSQ &&&l>*M&V&lrfc& 
M^I^ENCSMKG=Enc(lKb, SMK) | | • • • Enc (iKn, SMK) tl^XW. 

»<DBtm ^B93a-93n^SB«t-^o tt'TZZ.bKXO . gfll ^fi93a^^OSff 
^g93b-93nTi**ii4>^«iSMK^Si#tti^/c«),*^rliSK^#e>tL5/5^ 

rwi^^-r-s-i^oT, «i8fT-fe^9iw:, sfcfit gfi&atsMb-rs^a* 

ffljfeS. fc*5» gf^g93a^^gft^a93b~93n£r&$fbt-5^t>, gfg 
[0008] ZjtD&i3*S*TJ>>\£39. fel«»fiaot, SfSS6fll93a-93n<D5*>«>^tU*» 
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&m\m%.)&nn..&*, &mmm&!$.i>mmm, mm^mmm^m^m^ 
^fflbx, ffim^xTm%&mm%k&RVMm&mm\zm^, mum?-** 

[0012] m^m^n^>mm\t. mim.uz.wM^mMn^^r^h^x, mm^mm 
gi-k<Dm-mm * rait , -&,±.<Dm-um * p^ife^ 

m&mmzm^kvx, m^ik&ftm&za&u mmm^mf-^. mmm&£ 
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[0013] m%.m3K&uizmji n&mi ^mm^mmm ^f^tfeot , mmv-~-/< 

is, -«ioi-^f«^i:^^5^-^fA«i?i»^*, mm 
mm * rmmM&n. mmm~^^m^mmRtf~sx±<Dm-mm * m 

±<Dn J m^t£z>%Lmm*%.i&u mm^mRximmm-^^m^M^m 
, mmm-mm * mmmR-cimm^^ mmRximm^m mm&m * mm$n& 

[ooi4] m&muc&rtzmm*. m^imn<Dmnm ^r-^xh^x, m^mm^ 
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. unewj^ NumK-frri, m&omt&n- uxr±m&*w *-rtm>*-&. 
wmvzinseiw&m^ m^mm<om^\^:n\\ mm<Dm^t^mm^± 

[0015] m$zm5\z.&tf%&wn. m^^mm^mmm^^-ch^x. mmmw 

[0016] w^^6^*5^^i6Bj(i, tt^^iiatt^iisaff ^^t, mmmnm v 

m^mm^m mmzmmz., *fci*, ^gut-era -rzmwmm&mia ut. zmz. 
#*fc£gi;i, tutarait ^su^ 

zmjju mm^m mm*. w^bfrtctftmmmmzfemi-%mmmteiifint 
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[0017] 8»*3S7ic^3»t5*wtt, m^m\^mm<Dmmm^T^x^x, mwmww 

[ooi8] m$.m\z&tfz>mwte, mxMemwwm&in v^x^-cfco-c, itrsa^tT-fe 
[0019] m$n%9\z&rt%mwn, w^^6te*^nsaff ^fAffcot, Mse^;*^ 

M^i¥*^<f ^^ft:--HlIfBv'^7 L ^M^i!cP*-a-^fE^L, Tift 

[0020] w^«iotc *3tt5* w ffi&misMvmmm at?&o-c, aftiE^t? 
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[0021] m$v%iifc&ttz>&mtt. m^M&um^mmm^TJ^x^x, «»©ttria 

mmmmmmi-^mm^ &*<Dmmmm*mK. mmmmmzm^tu m. 
[0022] m&i%i2\ztertz>mw}z. m^GnZMmmmm^xT-uxhox, m$k<omu 
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rwrA«iS;i#u *r<Dtbmm=.isxT ^msmztumm -«j * mm 
[0023] Mk&mz&tfz&m tt. m^mmm^mmm^^xh^x. mmmwi * 

5 0 

[0024] »*3gl4lci3W55IWtt, M*^2fE^O#igE{f ^fAtifeot, AMei$g£ 

o 

[0025] ff^l5l!l*5lt«»W», M^«2|S^O«igEmv'^Ar^o-C, fltflEf— /< 
[0026] ttsJttgieiciisttSIBWW:* fS*^2|5*^)SIKff ^fATfcot, mflE^ff ^ 

[0028] w^iistc*^^^ #w«&Efrrw-'<£, flftK^ttSrsm-r an 
WL<r>%m mnt. ^m^mmt^^rM^n^\tmm.x^<>x^ mm^mm 

iz.ttjfcr&mm + ra«»&&»&j£5flBU * ra«^&^«:#iw-r 5te»J * p^sip 
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[0029] m$v%i9\zi$ftz>mmte. m^misizmm^mmuxh*), mm^mm^m 
m-mm * mm>b&z%-m%i * mmmzn;^ misses mm^ti^tiiat 

[oo3o] m#:m2o\z&if%%wte. m&mismm^m mmxh^x. m%c<Dwm&m 
* mmmz^, mm&mmm*. mmmm<Dmr. ^^m^m^-rti^- 

jfmx&zz.t&'&m.b-rz, 
[0031] m&i%2i\z.&tfz>mwte. m^2omm^mmmxh^x, mmmm^mm 

[0032] m&m22\z. tenzmmz. m^mismm^m iit^ot, mmmmm 
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[0033] m#m23iz$$ttz>&mtz, m#m9m&<D%:mmmx*hox^ m^mt&mm 

mmtD^-rtifr-mmmm ^tmmm^m^tu mmmmm^nu tarn 

litest, mmm^tm-mm^mmm^m^t-r^t^xox, tamm-m 
[0034] m#m24K#>rtz>mw tt. mm2owM<o^mmwxihox, mm^mmmm 

^x&&$frtmw<nm^tm~^7^j±m 
mfei,tcmmm^m~^x^w&mzm^kirz>^tiz£^x, mmm^y* 
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[0036] ttjfc«26fc*5rtS3&lfltt, *^r«SrK«-r51h-^i» iimBSfc^LTg^tb 
[0038] tt#J£28fc*3tt538Wri, m^26fE^O^n^AT*^>oT, ^OMsE*^ 

^±(ommm=-^^m^m^m^mm^m^m^t^^bi^±^n 
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[0039] m#M29^&rtz>mwn. M*^28ia«o7 p o^AT'feo-c, hiiem* mm 

[0040] m#mo\z.$dtfz>mw\-z. tt^^27iB^7 p p^A-efeo-c, tfiiESff 

[0041] m^mi\^if^m\^m^m26mm<Dy p u^y^mmi.tcmi^-ch^t 
[0042] m*m2iz.&vz>&w\z. &mm&mm-rz>mmm *itfcot, mmmmm 
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[oo43] m&m3\zL#i-tz>mwte. m^m32^mm<Dmmm ^mxtbox, m^mm 

h«tx-^«, mmnmtmmRxy-mum^mmm*^^ mmm-^mm 
[0044] m&m34\z.iotfz>&wn. m^33iz.mm<Dmmm^mx^x s mmmnm 
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mm*^&. iiufaif— /^te, -&±<Dm^m±f&^Rxf-u±.<D&mtp mm 

mmRxtiftiE.&m'pmmtkf&ttm^ mm^m^mm^±^u mm&m*m 
[0045] m#m5K&tfz>&w m&m2mm.<vmnmj}?£-eh<>x, m^mie* 

m&m<7)tn?ivkmz- y (WB**fto«f#^bftffv\ mm^m^^m^ 
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[0046] m&m6i£$dtfz>mwi*. m^sstm^mmin^xhox^ mmmwwm 
[0047] ^mmmmt ^fAtiiifi , ^cm^x^x, &m mmzm$>&-£ivx\, * 

[0048] *fc, «t> mmtmwtnmm + ra«i30^#^$ns £5 v > 

[0049] E*T#38W tc^aHIBm^^^co^co^flg^oV vc, m®£#J$Lft^bt& 

[oo5o] \mw-^(o%m<r>^m\ K&tt^saff ^^Aiom^ia 

[|ll3]^B^O^W^l^i3^^-Wffi^^ll20^^%*1-|l| 

[H4]*3» W©||jte©^llBl »cfc»tS»iratt«»i(rt«IJl 1 220#j^«Sr*-t"BI 
[|2l5]^PJO^^^l^^it^-^X^M^WSPGI_lc0-^J^ 
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-rm 
m 

-rm . 

PG\\ikx^m^u^^Mm\^n<omm(Dmfim 

m i8W&w<Dmm<D]&m 1 t^t^v^x j*m&&%c$tfe®iM 1 22<Dm&mz 

m2owmn<Dmm<DMniK&rtm&&mmpRG<D~mz^irm 

m22]^mm<Dmm<Dmm^^mr.^mmm^m26<Dmmm^-rm 
m23]^mm<Dmm<D^mi^n^m^t^mmENcsKG<D-'m^irm 
m24wmm<Dm^<Dmmi^^m~^mmmECMu<D-'m^-rm 
m25]*mM <v$m<Di&M 1 ic&vz-v— /< 1 20 am^^-s-spgs . 



WO 2005/074185 



19 



PCT/JP2005/001359 



m 

[027]*» m <DmM<Dmm 1 kss ttzgmmm 1 3ao«^j^i-s 

[EI28]^ W<Dmm<DMm 1 ft5«gitej&>j|?|5 1 3O4a<£>#t/&0tJ£^1-|2 

mMwmwnmMnMm i i^itsgfiit 1 3aou— /< 1 2frb&mm *becm 

[|2136]^PJ (D^i£(D^2 K*5tf53IH{@S'Jflf #£/«2 1 2<DMl&M&^'r 0 
[|2|37]^0JO«O^2^^tt^Hi/^X^S?S»P*-a-SPGIIIS(D-- 

[|!|38]^PJ(7)||^(D^ffi2^4b x tt^^H{@SlJ1f#EMMIII(D— 0iJ^-ri2l 

tvm 

m4owmm(Dmm(Dmm2\z^n^mmn±^2i<Dm^y^-^^^ 

m4i]*%w<Dmm<D]&n2fc&rtzv-/<22<DM&M&^-rm 
m42]^m(Dmm<Dmm2^n^^^m^^m^mm22<Dm^m ! t 

m4z]*mw<Dmm<DMM2fc&vzm=&MmnECMui<D— mz^-rm 
mu]^mm(DmM(D^m2\^n^-y<22(Dm^>^^m^^M^sp 
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m 

m^]^mm<Dmm<Dmm2K^nmmm^mu2304a(Dm^m^^-m 

m48^mn(Dmm<DMm2\z^mm^rm^mm305 a <Dmmm^^-m 

m^wmm<Dmm<Dmm2\z^\ir^mmm3ei<Dmmn j t^2i^hm^.m 

m5owmm(Dmm(Dmm2izidi-f^irmm23a<D-f--y<22^bm^m^WL 

[0051] 10 ii{fg& 

11.21 mmn±>? 

12.22 ^ 

13a— 13n, 23a— 23n gffgg 

111,211 as-raw*! 

112 SSHBSim#3y« 

212 fgHWtim^j&ias 

1121 JBfflilSiRSB 
2121 

1122 8§ratim*&*ftlH5 

2122 wL-tpmmmtktftu 
H23 

n3 ^mmmMi^mm^mu 

114 SlrHBBiJtff#£fi»B 

ii4i 
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1142 m-mwwNLm&t&wkM 

115 ^fA^IIIMI 

215 m=isxrJ>&&&&fflk&&m 

116 mmmmmmmi® 

216 m^mmmnmim 

121, 221 v^^A$£&^|fcpftl^{fgi5 
122,222 S^^AM^WfiMftilWB 
123 

124 *iHt«l±fife§P^^ 

125 m-^mmm^u 
225 m^&mmmzij&M 

1251 B#^««gfl 

1252 HB&&#g& 

1253 m-&ftmmwm 

1254 JgnfaJUgB 

126 m=-&mmm±j&i® 

1261 *n**«ir^ft5» 

1262 IHMgli 
127,227 &iHf#gaf&g& 

1301,2301 mwiffinm&mM 
1302a mm^mmmmm 

2302a fgHWJ*Pfl&p]&#lH5 

1303a m=.m&mmmmnm 

1304a, 2304a ffiSUtt&ttffi 
1305a, 2305a fflSU^RM&fiM&ttffi 
1306,2306a #iIffif*R^fI*|S 

1307a &mmmmm$m 

1308a f&-#WS&&#lH$ 
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2308a 

1309a M~&ft$m&M 

1310 mtiu 
[0052] (Mtenimi) 

[0053] igiKSSWC, Mffi S&lOii, «3fi-T5«3ISfrfe^ll^— ^<12ir«»[(OS^ 
m3a-13n£«ii&£;txTVV5iimi&^^ 

~$-z>tc£> K^m^m%mnmBMMG^m^c<D^mmn 1 3a- 1 3ii^gEm -r^ 0 v 

w^l2«,**«tSK&VV^7 i AM^P^-g'SPGSS:S^^$nfc*ii 
W *RECMSr**«>^fii6B 1 3a- 1 3n^BHfti-S„ tg«t©Sfi36fi.l 3a- 1 3nte 
> fflSiJffif«»EMMG < Rt^#iiW«ECMSrSfc, #ii*SK«:##U W^iiSi 

sKSr^-aj^m^i-s. ^-e, «wsfrfe^iif:Sm$i«i3a-i3n^-c©ia{c 

^1 i«flt sei3aH:j®sij«iiKaSr, «i§ff -t^fiit&m mm3bti.mmm 

o ' 

[0054] "-e«, #*^^0«jf^tCoV^9^>LI¥i»H^|ft^-r5 0 *1\ #g{f gig 
13a-13n^, M^^-ffigU^^Si^MKIGa-MKGInS.^r{@glJ^ 
F^#i?¥MKIIGa— MKIIGn$r@B^ftj't"?>^'fe^oV ,1 Tlfi,^"^"So #J#>^ SUgtTirV 
v-*^M»P^SPGS££f!jcU ^Ov-*7^«»S¥A-S*S 
PGS^-'<12~ftttT&(rt-5. *£u fg-fflS»J"t»ra«K*MKIGa-MKIGn& 
U ? ^rffiSlJ4 i raSiPMKlIGa-MKIIGnS.t;jiSlJSiIKa-IKn$rS(-, Sff 

»j f mBRvm - mm <p r^«ip^^#-rsfc* ic^S3Smhsij«.#» 

EMMG^4fiKL, 1S^C<D^«^Sl3a-l3n^SBfi-r5o WJif MMMG* 
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^mut^mmmi3a^ ^^hnx^^mmmiKa^m^^x, &m mm3a 
\cttj&ttttbtitc.m-m*\ * mmmMKiGaRxtm- mm * mm&MKi\Gaz%L 
#-r-5o sit mm3a&ft<Dg:mmmi3b-i3n<Dm-&i>mm^ ^mmm\ 

%mmmz&n'rz>o ^.<dxokvx, mmi3 a -i3n&&* m^zm- 

[0055] ^kK. V— > > .<12^^«SKM^5»^©»f^^-oV^TiaWi-S. > * 

^S.-*iHf «ECMrt>b< n #iiffif #ecmii <z>v vfna»«:£j*U 

mmfr^&&mmmECMtvxmm<n%mmmi3a-i3n^fa\?xmmir% 

o SjR<OS«SSfil3a-13nW:, #iH#*BECM£r^f U W*i§fimECMt^ 

CMW^-*iifi!ffRECMi»^*UBH-5o J tftasj&-#«W#ECNn<p*a\ $ 

-wj* ra«t»^-*iift#ECMi%ffiv>-c, **«isK^^#-r^o — as 

-#iitt#ECMIW>»£\ ^rffiSiJ^^ii^i^^*iift«ECMIlS:fflV^-C, # 
mmSK&lfrm-tZo Z.<D£o\ZVX, S«36*13a-13n©**«SKSr35»f-rS. 
[0056] fc*3* *Hifc7gffi-e&3«Ete v-^^lTii, m&n^pi i&ibzftfe<amm 

SU 1»ra«»Xtm -«W * ra««Sr!E*H-5R^, -*IS8MfcU;fcv =gg K*fL 

[0057] m±a\ *mmi&n<Dmmxhz> 0 sir^ *&w<omzm*yx j rJ*<D--mi&j& 
mx&zm&i$i/*^i<vufflK^xnm&ft?o ^tib(om^m^^xn 

[0058] <«WBfi^^lO#rfc> 
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[0059] mmn±>? 1 1 iz&^msK&gm mm 1 3a- 1 3n—gBit -tzco ^w^mx 
[0060] ^Tt-. ztib<vMj$^m\z.^xwmimw~rz> 0 *1\ iift mo^mm^ 

lbf^(cov^riii^VN-cift^-r2.o 

[0061] <mm&io<DMj$.> 
[0062] Kmmn-t^? u<vM)&> 

[0063] (im-uwnm 
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[oo64] (2m-mmn±f$Mu2 

Mmi22b,mrm^ikmi23t.frbmm£trt>o 

[0065] (2-l)»^51^1121 

%mVtcm&. m4X'7frp£otj:, ;t=&ffl:77^(FLAG_l-FLAG_k) > MfflWi 

(pid_i -piD_k) &xm mm (pk_i ~PK_k) : g 

»S^(SPGI_1— SPGI— k)<Ok*a{(FLAG_l.PID_l, PK_1, SPGI_lh ( 
FLAG_2, PID_2, PK_2, SPGI_2) , • • • , (FLAG k % PID_k, PK_k, S 

pci_k) }%&mvx^%mmmm&®imi22\z.T?±x-t% 0 *ri>-t\ *<nm.<r> 
(Dttfrttuom.*. *^^7^FLAG_i, mmm^^iD_u mmmpK_u m 

^FLAG 1 — -FLAG k<£>V vf tbd^JfeO „ M WMWU ^ PID_i«» P^fiSfJ^-PID 

_i -pm_kov vf n*»-c*>9 > . *3 mmpK_utm p^«ipk_i -PK_kov vf ^ 

a»-T?S>0 , ^— ^^A^sC.j^SPGi_iri^— ^^SMS3Elfc*SPGi_i 
-SPGi_k<z>v vf Jx^-efcSfc-rs. ->^-6««aSBk»SP 

ci_iSr, ^-^x^sHfe^ncpspGitLx^T 1 j*w&&mtm&mia m 1 5 
^m^-TSo ^lt, aBic, ^$^c^r^m'j-TPiD_is.^w^«iPK_i^ 
n«i'Wf*fb*BJii23^a*i-a. 

[0066] (2-2)#raW##BdWB1122 

fflMW#«Mft»1122W:, H4T?*-t*J:$fc, 

r^as^^^pfliis.^-v'^AM^icp^kmf (flag_:l pid_i, 

PK_1, SPGI_1), (FLAG 2 % PID 2, PK_2, SPGI_2), (FLAG — 
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k, PID_k, PK_k, SPGI_k)}£&^LTV>5t>m?fc6 0 

tt, »lffl«»J : fPID_l «ffi«iPK_l < S.^-v'^X^M^^S 

PGI_l&U«*ft J ffl79^rFLAG_i*fiy*L. »!rt3S^'J^-PID_2^WLT, M 

P^«tPK_2^^-^xAM^WSPGI_2A^*^^7^FLAG_2«r 

«ieu »iramsy^piD_k{c^b-c, »3Pfl«iPK_ks.^-^7 i As«g^i^ 

PSPGI_k^tJ ? *^ffl77^FLAG_k§ri5i^LTV ^JfcffiSr&L-O >5„ rr~C\ 
I-^fA^^tiSPGl_li4, |2l5W«J;9(-x 5o©f--/xrA^ft(s 
_1, t_l, u_L v_l N c_l)d>b1#J&£*VC:i3^ ft&tf>0— ^f^fig^ 
£fcPSPGI_2-SPGI_kt>, ^tim5o©|-^fAi«^t(s_2 1 t_2, 
u_2, v_2, c_2— s_k, t_k, u_k, v_k, c_k)^b$tJ&£:ft/C^5 0 

B-^^W^^f*> ^ft^-^9 l -MiH6*»:^*"8_i *t_i=u_i 

*v_l mod N" , "s 2 * t 2 = u 2 * v 2 mod N\ "s k#t k= 

u_k*v_k mod N"&Mtc~f£?\Z-$-x.b1nX\s^h<Dt~rZ> 0 09*. tf, 5o©f 

*^9^Noflftw:, «3w-*««ae«»4riaisi25i» #ii*ra««&#m252 % 

flTCfcO, 0fl*.tf2"{l28}ftifT**>5„ "mod N"tt*fl&«lito;L£-C&0, 
«-<tm^O^tT?fc0> 0U^fi2"{4}ttl6Sr#!*U MIHC^*T'fflV^ 0 * 
33, ^-^^^^P(0>J:SPGI_l)©f^^fetbT«, 4o©I-^f 
^M3Elfc(M:8_l. t_l, u_l, c_l)Srft3fc£U-t£jsfcU' ^<£>9*>3o£>3£- 
•^rAWi(W:s_u t_i, u_i)S^|-^7 1 A8Wl53S»:^^"s_i * 

t_l=u_l*v_l mod N" AT %^h~?, m<0<D—O(Dm—>Xlr 
&(W:v_l)£#*3#feft£a**>So *^ffl^7^FLAG_l-FLAG_k 

stutTir 1 1 m #rf s ma*. 79^lag_i -FLAG_k^^ 

3a-13nfet^JC£:-3lte>^fc3»=-^a|JSlJ^-C*>l), fflxl^WiSSI 

*rC*>£o ££>K, »H«PK_i-PK_k<0-tneixHu ^J^Lfi, ##ff:SCiSK2tc 
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[0067] (2-3)mmmm^tuii23 

mmmm^mii23^ m-i/x^m&&mtm&m^mmm%frpiD_ 

git ^filiSiJ^AIDa-AIDnS.t/fflSUSiIKa-IKn^^-C^#i-So ^bX, 

^©HfcS'J^AIDat£*f LT , *j-Jfcb-CV ^SUillKa^S^V ^XM ^HPK_i 
<Dm^k&ft V \ ^r(OBf^^:$:St-^^ffl^SiENCPKa=Enc (iKa, PK_i) tU 
g<f i£©f&S'J^AIDa^#j£tttt5o ftfc^^ff ^gfgjg'JTAIDb-AIDn 

^L-obiunif^ Mjfc^x^zmmm\zm^^xMmm<Dm^kZft\<\ zom 

^Enc(lKb, PK_ih •••,Enc(lKn,PK_i)^Sf^b^^«iENCPKb, ••• 
, ENCPKn^U ^tl^tKD^m ^©fg&EU^AIDb-AIDn^fSttttSo *LX, 

mmENCPKa-BNCPKnfrbm&£frZ>%--mwm #EMMI=PID_i I I {AI 
Da, ENCPKa} | I {AIDb, ENCPKb} • • • | | {AIDn, ENCPKn} } £ffr&U 

^om-«»Jtt^EMMi^, mmmmmmmmi6izmti-r^o ^xmmm* 
m^t-r^^m-r^^itr^v^t, Mtl&. #^fF^^2iciettcoDE 
m^ttte^xm \ mitr^mmm. 1 3a- 1 3n<Dm~mm * f^«i^^#§p i 

[0068] (3)^fiM#J&ffi#&^mi3 

gff iIMlfW^113il IH7r^-rJ:9{-, SiCOSfl 3£@13a-13n 
^S'J-r^^ff $e^H$lJ-7-AIDa-AIDn^ W3-g{f ^mi3a-13n^^«>4- 

^f^@^|J^AIDa{^J^<5(te>n-cv^ss:m^®l3a{^^laslJ«iIKa€r^u g 
ft mmmifrAiDbicztifc^nbtix v ^^ft i 3btem%miKb&i%mu 

^f^©^U^AIDn^^<5itbtbrv^5S^f^iSl3n{*^@!3lJ^IICn^^bTV^ 



WO 2005/074185 



28 



PCT/JP2005/001359 



2ft <dm mmm^-im 1 1 23& ^ mmm n&tfm 1 14 p% - «bu t 

[0069] (4)!&:i<f@siJt*te«ii4 

[0070] (4-l)^Zl^^jBH!5«l^»1141 

$ - .ft&tttt&fttt 1 141 1 1 ia»fe»n«jit#£/aa?# 

REQEMMII^ff 6^(O^ZliX^-rAMSikl, k2, k3, k4, k5, k6 

^^fifci" «5o eftKOjgn^^AigHg^kl, k2, k3, k4, k5, k6££j&-T5;££fc£ 

o -tUTx IH9-e^-t"J:9^, 6<®tf>M— v^-r^MS&tU k2, k3, k4, k5 % k6>6>£> 

jg -mm * mmmm^m 1 i42^ta^-t- 5. 
[0071] (4-2)m-m&mmm^^tmi42 

^-TO^K^Bt^b^ll42«,^r^^^^^ll41d^~ 

Z>6m<D%Sr.i/X7-J>j&HSS&kU k2, k3, k4, k5, k6©^Hlo©SHS^rilr 
a^i-So rcoio(Dm-^7 i ^S^Ii©^^*-i£^> 0»J*.tf » 7^AldJHRt. 

gff ^®SfB»AIDa^LT^#lU5:$g£, ^n^^ASHSttklt-f St. HI 
0X*7Fi-£?\^ ^ZlfflSU^ Wtt^MKIIGatttBZlV^AlWlfttklt^So ^LT 
,^LTV^5^SU#IKa^CS<5V^T^r^@SlJ^W^PMKIIGaOl^t^^=fTV^, 
^<DBf-^^:$rPt^b^Z:'f@^J> : | : '^«iPENCMKIIGa=Enc(lKa, MKIIGa)<hU 
SfSSSSflW'J^AIDaW^ltS. *LT, mo^ff ^a^S'J^-AIDb-AIDn 
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m$>mmmtu tti&vx^zmmmfcm^xm=.m&wmmm<Dmmk&n 

V \ ^(Dm^XEnc (1Kb, MKIIGb) , • • • , Enc (iKn, MKIIGn) SrBf^kSf — f@ 
giJtfrafii^ENCMKIIGb, ENCMKIIGniU ^rtl^etW^S'B^S^B'J^A 
IDb-AIDn(r#J&#tt5o ^UT, HUl-C^-TOft, Sm^g^U^AIDa-AI 
Dn^t/St^b^~^SlJ ^ F^WENCMKIIGa— ENCMKIIGn/S^^^^M 
rfflSIJfif&EMMN= {AIDa, ENCMKIIGa} | | {AIDb, ENCMKIIGb } • • • I . 
| {AIDn, ENCMKIIGn}}£ffr&U ^0|gi:<f@BlJW$8EMMIl£, fflSUffi $&PSB 

,V=fyXAfi, tftRtf, ^#fF^Ci)t2{C|E«ODESBt-^*-^ifr*fo«9, 5g 

mmm 1 3a- 1 3n<oig - mm * mmm&nu 1 303a-eBt mm- mm * 

[0072] (5)V*^M^3£?¥A^ifmi5 

M»^^1121^^m->'^^M^^SPGI$:S:ff j&lHH 

^o^-^xA^^WsPGnc^i-^^^Aim^m^mBiJ^spGiDi 
t,m~^^M^^sPGiiAOT(D^rv^AM^^sPGinc*j-f£; 

rSV^A^^^^SU^SPGIDIIt^^W^^^^^^fCP* 
-^SPGS^^-TS, -tUX, ^O^^SMS^J^^SPGSSr, 

msij-T-spGiDii{*, %ti?timizz>£i&ifcxhz>o **s, v-*t^« 

^Pf^giJ^SPGIDI^^^AM^^fiSiJ^SPGIDIHi^^tl^-^7 1 
A^^WSPGI^->-^AM^^SPGII^|KBlJ-r?)fc*^fflV^^, 

^ftmffirt^fllbV-— s<l2\z.&\^X^&$t\t i r—#\z.&\1rZ>m— i/XTJ*W 
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SPGIDItV^7 1 AM^WlifeSIJ^SPGIDlI«^<-0bfi:VN 0 
[0073] (6)^lJffWSH{f«|J116 

i@SUtf^PIE{f^ll6«, ^—|@SlJ1t#^lf|51120fflP^«iBt^bla51123^ 

SlJtt#^U^EMMIDII/&^#^$n5f®S'Jt»^PEMMG^^^-rSo ^LT, 
<DffiSiJtjf«PEMMG<£r, &m mm3a-13n^\»\tfXmt i"€)o ---C\ ffiS'JIt 
^SUT-EMMIDIiflaSIJit^^UT-EMMIDin* , #jx.f^ ^fr^W^ H ^ 
irefc-So fc*5* Mfit ^SU^EMMIDIi:fSSIJ1t#^SIJ^-EMMIDII^, ^jl^P 
n^^SUtH^EMMI^-{@SiJtf#EMMIlSrESiJ-rS7c:felcfflV^^ x ^feU 

^EMMiir^-^s'jff #EMMII<Dlf5/^^ie^if^^f#^^h^tbTv^2)^, i@ 

glj fi|$BPEMMG K*5l >TWff ^aSU^EMMIDItteSUtf ^gU^EMMIDII 
[0074] <m&n±^?U(£>W)fc> 

ft -r -5<^ 2&«^^sm mm 1 3a- 1 3n(csa<f -rzt 

^^^!H5ll2dS^^i/^AM^WSPGI^.T/m-©SlJi*#EMMI^^^i- 

%t%<DMft<Dmw^\,^xmi5\z7jk-fz7v-- h^m^^xnm-r^ 0 m^K. 
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[0075] <$mfrt^?ii\z£zmmmii%i%<DW}ft> 

m-mwrn 1 1 it. m-mzmmtk&m 1 2~-j&~ mmmmtt&mmEQE 

Mt>-fZo (SHOD 

mmmnvMMi*m%mnMMtmi6^mt)-rz>o (S1102) 
mmmmEMMii^m&mmmmmmie^mti-i'^o (sno3) 

^A^^P*-^SPGS^wn2^^fr5o (SI 104) 

6te, m-f@SUt*#EMMI^^-fiSU^f#EMMIId^/«e^teS'JW^S¥EMMG 
^4|L, ^OffigiJtf ^pEMMG^gff Sgl3a-13n-.gBfsL, mTTZo (SI 
105) 

<<^-^xAS^^^SPGI^T^m-«S^f^EMMI^^^OS)^(^x 
^S1102Op&Bt&W)> 

12m, mmmm^mmi22{cT^±^vx, *mm7yyft"i"x&z-m<DM 
mmm* m •■ pid_o tmmm w •. pk_i) m •. spgi 

G_i)fc"0"iaR£1-3. (S11021) 

»-*>'>w»»*ae wii^i i2u*. n-isT&j&myt mm m-. spgi_i 
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£)1-Z> 0 (SI 1022) 

m-isxTJ*mm&mmmmMii2m, mmmm* m pid_o tmmmm •. 
PK_i)*mmmm^mii23^M±)irz> 0 (s 11023) 
nmmi* m pid_» tmmmm •. pk_o t&m i,tmmmm^mi 123 

T^fiSiJ«iIKa-IKn(D±-C(Z)m^5l#'r?)c (SI 1024) 

_i)(Dm^t^n^\ Bf^b«ra«t(0>J:ENCPKa=Enc(IKa, PK_ih •> EN 
CPKn=Enc(IKn. IKn) ) ££fi£1-£„ (SI 1025) 

D d&MZ-X^ iHSUffi^EMMI^J: =PID i | | {AIDa, ENCPKa} I | 

{AIDb, ENCPKbh * * *% {AIDn, ENCPKn})££j&-r£ 0 (S11026) 

^^#Bt^ba51123«,^-fflSlJlf#EMMI^SU1f^gafff|5116^tU^ 
HT1"5o (S11027) 

<^-v'^^M»l|SPGIlS.OTr'f@SiJ1f#EMMII^^^©ll]^(^ 
X^yS1103OpiB)> 

^-^SiJff#^^^*REQEMMII^ffiLfc^Zlv'^-rAM«i^|f|51141 
Si, 6#<Z^~^;^-k$&&$ikl. k2, k3, k4, k5, k6££/&1-5 0 (S11031) 

^r^^V^^MIi^la51141tt, 6f@0^rv-^AS®likl, k2, k3, 1 
k4, k5, k6^e>^^rv-^xA^^PSPGlI^^i-S 0 (SI 1032) 

fgr^;*^«#i£j&mi4ifc}\ ^-v-xxa^^^pspgii^>^a^ 

^mmM^mMii5Rx^m=.mm^mmmm^mii42^m^}^o (si 

1033) 

^r^^M^^pspGii^mL^r^sij^rasiPBt^^ii42{*, 

g{f mmMl^mn^mm 1 3l^7^t^LT, &'<f ^STO^AIDa-AIDn&tf 
®SU«iIKa-IKn^T^#-r^o (SI 1034) 
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^U(^J:MKIIGa=kl, MKIIGb=k2, MKIIGn=k6) % M=ltiaHq*flMti# 
MKIIGa—- MKIIGnir'f'So (SI 1035) 

SiJ^ra«iPMKIIGa-MKIIGnOBt^b^tTV\ WBf^^Bt^^-^SlJ^ 
IffllilPENCMKIIGa = Erie (IKa, MKIIGa) x ENCMKIIGb = Enc (1Kb, MKIIG 
bK • • ENCMKIIGn=Enc(IKru MKIIGn) b"i~Z>o (S11036) 

nr. mm* mmmm^tm 142 &m mmm&i^AiDa-AiDnRx^m^t 

^r{@SlJ^P^StPENCMKIIGa-ENCMKIIGn^>b^$^^-'(®S l Jtt^E 
MMII={AIDa, ENCMKIIGa} | | {AIDb, ENCMKIIGb} •• • I I {AIDn, EN 
CMKIIGn}}£ffr&1-£o (S11037) o 

[0076] mrmftwrnmrnvg^mi 14m. ^nnsutt^EMMn^, m&m mmmm 
mi6iz.mt)-fz>o (sno38) 

[0077] <V—^\2<Dmj&> 

M^^^SP122, *#8i£«123, *jift^«jl^g|J124, 
®tf te^gBl25, ^-*iitt#^^126, *M1f #BBff ^127, 

[0078] (D^xA^^S¥A^lf^l21 

^-rAM^Wf^gli^-efe^SPGIDIiSPGIDlHC^t^^^^AM^ 
^SPGlS.^B-^^M^^SPGII$rttWb, mi8T?7jKf J^&v^x 
i*M^»&^122t£&i^U *#«i^gP123-^«i^il^REQSKSr 
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[0079] (2)^^A|M*«fc»IMWBS122 

[oo8o] o) &ftm±j$.n 1 23 

*ig«t^i23^, ^^A^^^p^sft ui2ifrt>&mm±i&m&KE 

smxv^fzmjtztetizxmmnmx&y, *isw n^.mm^"^u^b^M 

[oo8i] (4)&mmm&}&&miRm24 

> m-^mmm^ui25^mr.^mmm^ni26m^-rti^m^iu ^<o 
mim^tcm-^mmm^u i 25©^^^p^«i 251 tm-^mm^t 
m253^\,<\^m~^mmm^m26<Dm^mmm^mi26i^m 
msKzmti-tZo m-&mmm±&m25frm~&mmm&j&m26<D 
^^-rfrfrzmvi-tzjjmkvxte. wm*. nm^x-hM^y^-^-* 
\cm^m&.i-z>j>m^ nm^m^xy^yMzmiir^t^^ 
(5m~^mmm±^.m25 

a* rm®nmi52t, m~^mmm^imi253t, mr.mnmi254t, a»e> 
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[0082] (5-l)B#^M£«1251 

Bfr&g fmOitimi 25 1 tic, &iiffl#£/£ff|SSftffi 1 24*»fe*W«iSK«rSfl5L 

il/Tit. Mx.it, ftM*m^XTs#MZ.&m-ttW£¥ft*>Z> 0 tit. SLiCz, w 
, m, nJ3\ ^^ttl28tVhOg^-efc^o *fc, WfAWft# 

♦&jWSUl22tcr^"fe^L, fg-^*xA;M^iScS¥SPGl£Jfc#U 

£j#3£"rl = s*z+v*m mod N\ "r2=t*w+u*n N\ "r3=u*z+t*m 

mod N\ "r4=v*w+s*n N^St, 4o(DNf^^Crl, r2, r3, r4££/& 
-T-So feftl>fc««H(E»rl/r2, r3, r4*»y»J**ix5, 020^^5* 
NfS!Eag«»PRG=Sr^U ^0^^#:pPRG^-^J^I^1254^tii^«o 
fcfcfc* *iitfW«5l#»1252-.^ltrajBkz> w, m, nSrW^f 5, 

[0083] (5-2)&m*mmwimm252 

©i, ^Si + RltiSMKSr, W^;l£>*l5f— + Pg«^6*"SMK=2* 
s*t* (z+w+c+n*m)+2* (u*s*n*z+t*v*m*w) mod N"f£3£<5 

So 

[0084] (5-3m-#&mmwmi253 

*ii f no«t^#^ 1 252*^*ii 4> ra«sMK*sf?uys:»e-, z<D&m * mms 

3£fi 1 3a- 1 3nCD#^— 1 308a fc*5V >T Bt#-f k*^"«ENCSKSr 
mENCSKZm=LMfflMl254\mJj-tZo 



WO 2005/074185 



36 



PCT/JP2005/001359 



[0085] (5-4) m=.mmn 1254 

s 0 ^x^<Dm-&mmmECMiz&mmmECMtvx, &mmmmmm27 

w^s'j^-ecmidi^, &mmnBCMiz^^x\<^-?&m-&mmwEc 
Mifrm~&mffimvcMiifa%mi\~tz>mzm\<^tiK ^#>y—;<i2t$:m mm 

3a-13nK*3WC, S&-*iitit #ECMl£S&r&iH# #ECMII^9ffli-^^^ 
^&#*bTV34B£\ *iitff«ECM^-*ii«««a^ECMIDlXV»r 
*)Mf #HISU J f-ECMIDIWS^<-Obm\ fllfctf. if->*12£gfl =ggl3a~13 

[0086] (6)|&r#aW#£ffc»126 

^-*int«^aji26, m22i^-rj;5^> ^n*^r«iiF-^fb«Ri26it, m 

H0J$lgP1262^ *»P>fllfiKStu5. 
[0087] (6-l)^-*^T«iBt^-Wl261 

fcr##«i&-IHfcfflS1261W:, 0-«9»lBJl24*»e>*^r«lSKSrS{tbfc«^, * 

#U ^013*^6® (Z)^Zl^x^M«ikl.k2, k3, k4, k5, k6£rtttij-f -t 
bT, *T&-^*7\&M«kl*r£fc* ^«SK&ffiHHtU Bf^b*^«iEN 
CSKl=Enc(kl, SK) ^bT, flfc©|gz:^7 l A|MS«k2, k3, k4, 

k5, k6^*fb-Ob, mmZs *#SISK£Bg-$HfcU l*#*fc##*ENCSK2=Enc 
(k2, SK) , • • ENCSK6=Enc(k6 > SK)&£.ffo1rZ >0 McW^ H23"t?^"f ±5 
$\ «H^##lteNCSKl, ENCSK2, ENCSK3, ENCSK4, ENCSK5, EN 
CSK6&jtjfcb;tet>0>&, Bt^fc^StPENCSKGibT, »=©M»«P1262ltttl, 
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DEsit-^^Wfcif -c*>9 x mtr^m mm 3a- 1 3n^^-^r ^mmnu 1 3 

[0088] (6-2) IgHf&lJM 1262 

1-Z>mzm\<^&. /^12i^f ^Bl3a— 13n^*3V^T, i&iltf IRE 

cMIt^r*il^t^ECMII^•9l±^•f-^5>'^^*WLrv^^^, *iifimEc 

MtC^-^iiW#liBU^ECMIDI^^-*aiff#fSIS'J^ECMIDII^^<rt> 
&V\ tflfctf, i^— /^12^ff ^Bl3a— 13n(^*5V^ &5&fcb;|x;fcl$*9-Ctt ' 

[0089] (7)*jitf#SE{f«l5127 

*iitf^BEfii27f*, m~&mmm&j$m25<Dmr.mwm254.hv<te. m 
-&mffim&i$.M 1 26^H^j^ifi5 1 262, o v ^-fthfrfrib&m^ mECMZ&m 

VkM&. Sm^l3a-13n^-?:<D*ilW#ECM^SB{f-r^o 
[0090] <f— ^12<DfM^> 

^±r% ^wn2o^i'ovN-ctft^^ : ffo7t^, — w-/n2oib^tcovN 
i^-ct&^-rso ^-rAM^^A^it §Pi2i}6^*#«t^^*RE 

— ✓< 1 2«li mm. 1 3a- 1 3n-rrfc^**«lSK^iSEm^^^i!)f^^ov 
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[oo9i] <mmf±is9i\frb^^j>ffi&$mMM&sYGs*&m vrm<nwiw?> 

(D^f^S^v'^-r^S^^W^SlJT-SPGIDI— SPGIDIl£&l£, W^^T- 

j*m&&&mspGiRxfmr.^x^j*®®&mMspGiiztt\Mirz> 0 (S1201) 
^^m^^mM^mui 21 wspgis.^zi 

^x^S^^^i¥SPGII^^x^M^mP^lfB122^i^L, ^Ti-^o ( 
S1202) 

#^|i^^l23«, #^$^K££J&U #l^g|5^^124-Ui^-t- 
3 0 (S1251) 

«126^^Ufc#-a-,^7 i 5'^S1260^iit?o (S1252) 

*^1t^^lfB124^^**«iSK^mb/t^-*iltf#^«125«,SL 
Jgfcz, w, nSr^1-5o ^O^ v v-^^?g^^:l¥^122^T^-fe^L, S£- 

£ttW1"5o ^LT, ^fe^btT^)4o(^NF^»^^: M rl = s*z+v*m mo 
d N"^ "r2=t*w+u*n N", "r3 = u*z + t*m mod N\ "r4=v*w+s* 
n N n %m^ 4o©^^trl, r2, r3, r4££/&-r5„ ^Lfc40(D^^r 
1, r2, r3, rtfrtbM&ZnZs B#^$t^PRG££j&-r5o (S1253) 

%<Dm&£WfflpRGzmr.m'i®m254~-Mt)-r% 0 (S1254) 

*ii^^0«i^#^1252^[R](j-CSL^:z, w, m, n^m^-T^o (S1255) 

^m^mm^nu 1252^ ^^^p^§ci25i^^sl^z, w, m, nsrgjt 

^?#SPGl£&#U W<p^<bSI— v'^7 i A^?gigiCsS.U ? tS.^u < 5.^v / Rt^c?r 

ttw-TSo -eb-c, *Mfr^iisMK^, w-£*.ib*L5f— /^a^p^«i^^:" 
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SMK=2*s*t* (z+w+c+n*m). + 2* (u*s*n*z+t* v*m*w) mod 
N"tc3£<5V^®t#-rSo (SI 256) 

&mvtc&m^mmsMK&m~&&mm-%itni253izmt)~fz 0 (S1257) 
m-^mm^tui253it, mr.mmm24^h^mmsK^mu 
&m * m$mnn 1 252^b*M * mmsMK&&mutm&. * mms 

£j&U Z<Dm^k&#mENCSK%mr.UWm254\z.Mj]irZ>o (S1258) 

m~M'mm254\$. m^m^^Mi25i^m^mmpRG^mu * 
m~^mm^tni253^m^t^mB^csK^m ut*§£\ 

«^b**#iENCSK^&^ &-#iifflf $BECMl£3£/&U ^<Dj|-*iHf 
^ECMI^*iltt ^ECMibT, *iH*#SBm^l27-m^i-2>o **rv?S\2G 
4^m& 0 (SI 259) 

mr.^m^^tui26m, ^r.mmui24^b^ms,K&^mutm^, * 

•f , ^TJJf&%£%tm&m22iZ.T?±XU Brv^AM^WSPGIIfclfr 
#U ^O^d^e^O^-v-Xx^Mifelx k2, k3, k4, k5, k6Srtttil-r^o ( 
1260) 

Jgr**«WHbSB 1261ft, ^MMW.ZL^^rJ^^mX, k2 % k3, k4, 
k5, k6£^£, ^mSKZm^fcU fft-8-jb**HENCSKl=Enc(kl, SKh 
ENCSK2=Enc(k2. SK) , • • • , ENCSK6=Enc (k6, SK) ££/&U 9f-?Hb* 
^"SlENCSKl — ENCSK6^T)S^SpU"C N Bi^ft#*S^ENCSKG££/&-r5 0 ( 
S1261) 

m=.^mmm^tm26m, &t #«^8¥encskg£, m=mwm262 

Ktil^l-So (S1262) 

^H^m 262(i, mr.^mm^m 1 26 ifrhm^mmmmExcsYLG 
^sffLfc^-a-, ^r^int^ECMiir^^-^^js-r^stt^as'j^ECMiDii 

^ffitfl^ECMII^^iiffl^ECMtbr, *iiffi#iaff §P127^m^-T5 0 (S126 
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3) 

*aif«ECMSrSfiL3t#afflf $RSEfa SB 1 27 14, Sf5 SSI 3a- 1 3n— #iifjf 
iECM^fLt, mTi-Z> 0 (SI 264) 

&_L#, 0iSE«->^7 i Ai^^5jfcfc5^-/n2o«^tK]f^-cfc§o $ev *x 

J^tSjf^^oV^lftMSrfTVX Jfcfc. gfI$Sgl3aHJL<Z>gm^fil3b-13ni<D 
[0092] <^{f^Bl3a<Dlf|j&> 

1302a. mr.m%wmmmw&M 1303a, raBijsw&«ftgisi304 a , rasy* 
ra«ii&wi305a, *aw«sftm306 % ^r^gpi307 a> %h~&^m$m 

gP1308a, ^H*^Si^#gpl309a, ffl;fc|flS131(K to^MSfifcyxSo % 

-mftwmmmwinM 1302a, s&HBsu*ra&a¥&#m303a, <@su«t*&*ft^ 

1304a, ^BSU^nm^iMffi 1305a, ^ril^$|31307a, &-##«I&#8P1308 
a, ^ZL**#^#SiJ 1309a, fctgff ^@13a@*(D«^^^-efo«9, fiSUW fBg 
«fHS1301, #ififfif S&1306, (ii^l310, tegif SS«13a~13nK:i3lvr 

[0093] (Dwm«sm«pi3oi 

[0094] . (2)m-mwwmmm'&nm302a 

m~m^mmmmnm302an,mmmn^iBm3oi^hm-mmmm 
MMi^fabfc^, $LTm28fc^&?temmmfemm304afab%:mmmWi 
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V ^1t&m&WM%frAIDa\ZttJ&-f'Z>m -^k»IFfl«iENCPKaSr®#-r-5o 

, fliSlJ«»«rt«R1304fc»iW^-CV ^5fflSlJ«tKal!:S^#, P£-5§"fb#JHSiENCP 
Ka<D«#fbfcffV\ fflrfl!ifeS'J^-PID_i^^i-^WF^«iPK_i^^#-r5o 

—mm iEMM© ^(dm mmm? m •■ pid_u piD_i«piD_i-piD_k<o 

V vftuW [-^i-SBt^b^-liSiJ * (#Rfcf ENCMKIGa_i : ENCM 
KIGa_if^ENCMKIGa_l— ENCMKIGa_k(^V^i a ^^)^#L> OTItPK 

[0095] (3mr.mm<pmmmi&mm303a 

m~mm * mmm&nw 1 303at*, wit *s« n 1 301*^^-^ suit $be 

»J^AlDa&tflBB»Ka&##^5. ^LT, Sfll Ufc#— WJttf «EMMIId>b 

, «su«*»*ft«fiJi304jc«H(ft$tuTv ^csm^sa^'j^-AiDa^^-r^iit^t:^ 

-ffiSlJfpFflltPENCMKIIGa^^l#i-So ^©t^ l@glJS»KaK£<5# % ^(DBf-^ 
^l|i:ra4 I F^ii#ENCMKIIGa^^k^m\^-^SU , P^iia¥MKIIGa 

&]fc#i-<5o ^om#u^-^sij^ra«i^MKiiGa^tesij'pM«it&^ 

|fR1305a(^jW-r5o 
[0096] (4)«S"J«»iW«B1304a 

«j3lJ«WfeW«|J1304att, El28T^-r«t9{^ Sft^flMRBlJ^AIDaXtWHSUttl 
Ka& Bf#-f bgMHBU * Ffl W*-^ENCMKIGSa^^i-§^0-efc?>o 

«su«*mi«j«ij 1 304a^te. jbhwm * iw«a*##*B 1 302a,Rtf &zhh»j «p n«i 

»J&»«P1303ad^T^-fe^Rrtg-C*)5« g{f OTflRSU^AIDatt^^tfg 
aW\ 0Rtf, *#fFXlK2^iB«i©DESI«P#^0«rCfc«?, 
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[0097] ft*5, z<Dm%m&&im304ax~&Mi5hx\, ^m^itm-mm * mm&M& 
ENCMKiGSatt, wm^n±^ii\^^r(DXoMmxip^titch(Dm 

[0098] ffiKmS"JT-PID_l K*f/£LTV ^H-^f^its.a^LlWu. 

od N n ^mtcrx^2<xDmmt^wcx, y*±}&~tz>o ^x\ zocommtmk 

0»J : y) «^«>5*ife*4r«s*>«J > 9^^*«J5iHfc3g»xS:— oS^i, ifc-rttSUflS 

fc"*"H:mit^<D^-e*>«9, mtf2*5ttlO&j§t!*U £*f*ra£«!*"CJi§V\5 
o *0>8U *(OfflSiHk3E«xRVyS:fflv^, ^»^^.bti54o©I- |@SiJ* mm 
£j&j£"mkll = s_l*x mod N", "mkI2=t_l *y mod N'\ "mkI3=— u 
__l*x mod N\ "mkI4=-v_l*y mod N"{^S^#4{@0^— fflgijf mm 
mkll, mkI2, mkia, mkI4££ESc-f 5 0 *L"C» *©4fl0>jR— ' IBJ3U* BUfcnWl, 
mkI2, mkI3, mkI4*>fe«^$n«H30^^J;9*fg— ffl9J*W«»MKIGaS: 

flBiJ^IH«»ENCMKIGaSr^-t-So l&O^— VX7^$J&^&s_2~s_k,K. 
U?^-^^.-r^^^^:t_2— t_k&U^Hv-;*-r^$&^$cu_2— u _k,R.tf 

ffiSiJcp^«imkIl_2— mkll_k, mkI2_2~mkI2_k. mkI3_2— mkI3_k, 
mkI4_2-mkI4_k^fig-r^o *l/C* B»J * ra^^^W^t 

jfcSftSJS— «SU*|ffl««gMKIGa_2(=mkIl_2 I I mkI2_2 | | mkI3_2 
I I mkI4_2) % MKI aL _3, • • • , MKIa_kSr^-f So *l/C, ^MtKOMfSi 
f^U^PID_2- • •PID_ktC*fJ5S^^, Wra«iPK_2-- •PK__n£gKBf-5§-te£ 
*TV\ Bf^b^-fflB'J |: praSi#ENCMKIGa_2, • • -ENCMKIGa_k££/&-r 
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(^m^5£^$-frfc^{(ENCMKIGa_l,PID_l) | | (ENCMKIGa 2> PID 

2) | K | I (ENCMKIGa_k,PID_k)}^^^b^-f@S"J4 , ra«t^ 

^ENCMKIGSafcLTWfflfci&3arO , >5. fcjfc, *K*hXPIf^aMWW 
tfratte^^CENCMKIGSa—ENCMKIGSn) f*Sft^gl3a-13nft^^cC 

stetfcsjsfc-rso -tb«> *ft^ft©£fs§gei3a~i3n£ywisi« 

[0099] (5)fcBU*ISWH&JWm305a 

fflBlJ*ra«tte#J*S1305att* H31T?i3%*rJ:5K:, IB»iJ»pre«^MKIGa ( R > 
^-{SSU^^ii^MKIIGa^^l-^CD-efcSo £<D«flJf IH«H&*WB1305 

[0100] (6)*iiffif#Sm«P1306 

fc*iifflf«ECMS:||raiW«U1307at^m*-r«o 
[0101] (7)^n»tR«J1307a 

0-il^§P13O7a«,*iltf#^f^l3O6*^*®W^ECM^mLfc^ 

„ ^O^ffitf SECMttttlTV ^*iitff nm&fr (ECMIDItU< ttECMIDII) 

*8ECM^rflasu«#ECMn<z)»-&, « bu fraaH&JW* 1 sosat^mnmwi * 

BO«l£MKIIGa&Ift#U ^-*iHf«ECMII^Il'f@SlJtpra«iPMKIIGa^ 
1309a— W^J-TSo 
[0102] (8)#-##«*#«pl308a 

^— *^T«5[#«J1308a^, jgZiaW«|J1307ad^-fi33Utpiai«^MKIGa 
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RXfim—&Mffi $RECMl£gfib*d§£\ *T> fg-#iiW«ECMI*^l*3E3E 
^PRG£*iffl-f 6 0 *<01$&&m&FRGi>^ 9&&&kxU r2, r3, r4£ 

J*WU ^bT, fg— |BSU*IBI«^MklGa*^IB-ffiBUtlBI«tnikIl, mkI2, mkl 

3, mki4S^AWi-5. ^*^e>n5Sfliss*a*ra«^fifc^:"sMK= 

(rl+mkll) * (rl+mkI2) + (rl+mkI3) * (rl+mkI4) mod N"&&K:> # 
ii^SiSMK^j&'-rSo ^bT, B-*ii»*RECMId^l«-^fb**«ENCS 

teu **r$isK£i&#-r3o ^bT, ^<D**itsK$rm^gpi3io-m^-r5o 

[0103] (9)»Zl**|iJft»»1309a 

»Zl**rfBS#»1309a^, *Zj«*B1307a*>6>jKz:«iaU , t , IBIW»MKIIGa 

&t«&-#iSW «ECMii«flrufc»#, *r , jb^i^i^wencskg 

^-Bt^bft^TSiENCSKl, ENCSK2, ENCSK3, ENCSK4, ENCSK 

5, ENDSK65rttw-r-5o ^ur, ^=Lmm^mmmMK\\Ga^^tix\^mr. 

Bf-^X'Sr, fg— Bf #^b*^r«tENCSKl, ENCSK2, ENCSK3, ENCSK4, EN 
CSK5, ENDSK60V^tl/*»*^-o«B^U «RbfclO©«*S:*«-^ffcb 

»ZlliF^fk**«ENCSKl, ENCSK2, ENCSK3, ENCSK4, ENCSK5, E 
NDSK6©V^n*»3&^-o^Wt-5^tbTtt,fBi:*aWa^«12'6tJ: 
*5V^T, ^rLBt^b^ft^ENCSKGOt 5 ^, ^^P*#-#-5<0fcf£fflbfcf| 

**«t^W§^J:9t-bT, JKZlfllSUflBI^WMKIIGalCfcra*^ ^r**LTV> 

^0^-^^A^«^lJT^*^.m^Bt#{b*#«teNC!5Kl-ENDSK6 

[0104] (10)ttJ^gP1310 

W^^1310{i, 1308a, t>b<*4> #n^ttJR#*P1309a 
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[0105] <g{f3£gl3a<Z>itjf£> 

PMKIGa&tf fgllM * raHPMKIIGa£i&#1-5^<Z>®)ft^oV 1232}^ 

[0106] <8t3§fr "fe^l l*>e>ffiSUfflf«»EMMGSrS(§ UfcB#<D»f£> 

If LfcffiSUlf WEMMGW^bs fg-fflgiJfflf«EMMI&^n«BlJW«EM 

MIlSr*ftmi~5. (S1301) 
fflBUti!f*Sf&m301«:, |g-fflSUW*EMMlSr^-'IBSiJtt i ra«»IR#SP130 

0 (SI 302) 

^ENCMKIGSa^^#-r-5o (SI 303) 
#jfc^3Bf^Mra#ENCPKa£&#-f5 0 (S1304) 

^_-^g,j tf, pfl^^#iasi 302a{i, mmmmtton 1 304fc*Mft§*vo \fc «»u 

fifcKa^S<5#, Bff-^bJWIR|«ENCPKa©«#^t:S^fV> % $F^PK_i£&#-f 
5„ (S1305) 

«3wra«tssi#fRi302att, m^-itm-mwi^mmm^ENCMKiG 
<D&-%4k&m\ m-mm^mmmMKiGaZftm-tz, (si3oe) 
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®J + ra»«HW*B1305aH:t&j|ft-r5. (S1307) 

#gB 1 303a}* , msm&WlM 1 304a* ^Sffi ^«BIJ ^AIDa,R-UWJS&Ka<Sr 
^#-T5o (SI 308) 

igrfssij^ranTOWisosais, sit ufc^-fflsuff #emmh*^, mmm 
&jjirtm304«^ 

*F^i$ENCMKlIGa£&#-f5o (SI 309) 

mrffisiicf mmm%Lmi®i303ait, m&miKaizm^. z^m^it^-mm 

*mmmENCMKllGa<Dm.^r4k$:ft?o (SI 3 10) 

mr. mm ^ mmrnm #«p i 303a«, m^tvtcm r. mm * pjt&i¥MKiiGa£i@ 

S'J^F^^^lSOSatC^-r^o (S1311) 

ttf«ECMSr»-aKR«J1307atcW^J'f 5. (S1351) 

SB 1 306^ib*Mli$ECM£^f LfcH! H MUlM 1307a«U 

*iit*#ECM^^*ti^*iit*#msu^^^#b, t>u -t©*iifl? mmn*& 
ecmidiw^, z<D&mmmcMzn-&mmmcMib\,x, mm*m®& 

jftffi 1 305aH)^m— flHSU * H«i#MKIGa^#L > *T<©3!H@gU * FflSiS¥MKI 
GaSU«0-*ii1*^ECMI^-**li©#§R13O8a--|±J^L^7 i y7 P S135 

2— iitfo t>U *rtf>&iHf $B8l&BiJ^-;& s ECMIDII£>i§£\ ^r©*iiffif«ECMS:f| 

z:*iii*#ECMiiib-c, mm*mm&mm305afrbm~m%mmm 
MKHGa^#u. *<Dm-mm*mmmMK\iGaRx$m=.&m\iimvcMiizm 
-&mm&mni309a^mt>u ^y^si356^3ttf. (S1352) 

gBi308a(*. ^-#iiffif*ECMi*»bi*aEaB»cPRGSr»ittiu 

^gfePPRGa^ B#^£SCrl> r2, r3, r4^tttU«o ^LT, «MH8U + 
MKIa*^^— -ISglJ'KflS&nkll, mkI2, mkI3, mkI4%ttiMTZ> 0 -fcl/C, 
TLhM^m S£«#il*ratt£fifea;"SMK= (rl+mkll) * (r2+mkI2) + (r3 + 
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mkI3) * (r4+mkI4) mod N"«r£fc:* &m t PfflmSMK&m&1rZ> 0 (S1353) 

> **«ISK^^#-r^o (S1354) 
1358~-ittp 0 (S1355) 

#§P1309a«, m ^b#^tPENCSKG^ib, ^ZlBf-§->fb**«teNCSKl, E 
NCSK2, ENCSK3, ENCSK4, ENCSK5, ENCSK6£rttmi-5 0 *VC» 

P^PMKlIGaKg^T, ^<7>60(D|gril£^*;imENCSKl, EN 
CSK2 % ENCSK3, ENCSK4, ENCSK5 v ENCSK6tf>l vf tV/^ft/fc-TSlotf) 

m^x&m^ku &mmsK%j&.n-rz>o (si356) 
m ~ &mm&n& 1 309ais, ^mmsK^mtiu 131 o^tati-rzo (s 1 35 7) 

ttj/jm310tt, fg-*^&« 1308a, tilXte, 1309a 
1358) 

^±2^ #|H{fv'^^l^#^^^-efeSSft^gl3aO«^i:ib^-efc5„ ft 
SfaMl3ai:ftfe<DSff ^®13b-13nirO+aa^:fi, i^TOiil9^fc6o 

[0107] (i)g§-«'t i ^#^&#m302a-c\ igH@s>j * fia&p£&#i-5fci?> 
sij§^fim304a^<b#.5g{fCT 

j&£gl3a- 13n-CMft^ 

(iOig^M™&?¥&#m303a-t% &r:fajw*ra^&8i#i"Sfc«>fc* m 

3a-13nTW£^o 

[0108] (iii)flaSU«i*&^§B1304ar% *&i^$tbXV^S:«^®^>JT-(AIDa-AIDn)S. 

tWJSi (iKa-IKn) &tMf -^bJg-ffiSiJ * Pflft^-^^^^tlOSff ^Sl 
3a-13n-Cj^£5o 

[0109] (iv)«SlJ^F^#l&^^1305al?,^$nrV^^-{®BU^P^Si^S.^^ffi 
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. S'J 

f mmm^ti^^mmm 1 3a- 1 3n-cM*5 0 

[0110] (v)J&ZjMRttl307a-C, •f@glJ^^«i*&^1305ad^m#-t-^ll-ffiSiJt 1 

&-«s'J raw^^nwo^ft 1 3a- 1 3n-cafc*. 

[0111] (vi)^-*^«i^Wl308a-C% ##*SK&IR#i-SKK:/flV*3S&HB»J*ra 

«»*5^*V^*L©S«3S«13a-13n-ea*5o 
[0112] (vii)m^**«i^#lflil309aT% 

[0113] <Hife^«I«>»f^|ftliE> 

*nm&m i v vr\ zivetuDgiB mm 1 3a- 1 3n nr*ji*«fli[Srfc*»— 

mm * F^Si^MKIGa— MKIGnftt*&ZHBB!| Pfl^MKIIGa— MKIIGndS#J 

[oii4] *i\ m-&mmmECMi&ttm-mm*mmMMmG a -MKiGnzm^^m 
Kbtiz4^<Dm~®M*mm£f&ttmttm-m^rmm&u mki2 % mw 

[0115] SMK=(rl+mkIl) * (r2+mkI2) + (r3+mkI3) * (r4+mkI4) 

= {s* (z+x)+v*m}*{t* (w+y)+u*n} + {u*(z-x)+t*m}*{v* 
(w-y) +s*n} 

= {s* (z+x) *t* (w+y)+u* (z-x) *v* (w-y)} + {u*n*s* (z+x) 
+y*m*t* (w+y)+s*n*u* (z-x) +t*m*v* (w-y)}+u*v*m*n+ 
s*t*m*n 

.. = 2*s*t* (z*w+c*n*m)+2* (u*s*n*z+t*v*m*w) 
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&#xROV&^*ftV^) 0 Z<Dlt)to, £g{g3£gl3a-13nfc:*3VvC, *il*fffl$i 
S;"SMK="2*s*t* (z*w+c*n*m) + 2* (u*s*n*z+t*v*m*w)"i 
[0116] ^ECMII^^-TO^rafi^MKIIGa-MKIIGnO^^ 

[0117] <%mm\<D?fc%> 

[0118] im&<Di&m2) 

-c*^-«*st#uTv^s, nMMm\z&v6*>^ymm*>x'TJ*2te. ecm 

[0119] ^T5-, ^BJ(Z)3^x^BE^f ^xAO-»«^fcS3^^@am^ 
t 1 A2(Ol¥*a(-ov ^ISrff?. 
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[0120] <^T>y%MMi<'*7'J*2<DMfo> 

mM<DMMibnmtez%mmm22a-22nj)>bMf&£tiz> 0 v>mi$mm<o'&. 

1 2 b ffi^fi 1 3a- 1 Snt^rtu-^tbl^C-C&^o 
[0121] £*Tl£, *ISWOfiiffifi^7 i ^^— ll«1§T*fc5&IBffi^*^2<Dp*|BK 

[0122] z.^<om^mmK^ s xnm\mm-r^>o *-r , s^rfe>'*2i,s.w>--^22 

[0123] <m^n±^2KDmm> 

mmn±^*2in, ms^-rx?^ mmmmmiu n^m\mn&&M2 

12, Sm»e^StJSW«IMftSP113, ^^^^^^^{1^215, Wftt 
WSElf S&216, tf^flt/&£n5o fc*5* gff ^BmW^^lfPll3{cHUr(i 
,^O^Bl^^tt^SB{f^xA2rt©Sffi^e^it«^^ii3i:l^il 

[0124] (l)|g-«!H»«iJ211 

{@Buts^^«2i2-m^i-'6o ra»m«3Eiw&#a s "*>sraj££ft^ 
r^fe (^>j : i b ^i¥#) "#*ro3&£\ M-mmmii&*v>*teb**mx.z>ftb* 

[0125] (2)&Hffi»Jt»#£j*SB212 

&=fflBUtt#£j£8B212Wu El36[C7jKi-J;5(-> ^H^-ri»M^P^« 
2121i:, 3il-4^«£«2122^ J&£*l5 0 

[0126] (2-im^y^j^m^Mmm±^.mi2i 
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M5£REQEMMIIl£g{fUtJt£\ 6i@0^-v-^A«^^fl6SiJ^SPGIID 

1- SPGIID6«D^:tl^ftl,lC*fLr. Ig-^T^M^M^SPGIl, SPGI2> S 
PGI3, SPGI4, SPGI5, SPGI6} §r^-f5 0 ft*^ f-^r«tti|SPG 
Ii (SPGI1-SPGI6) ©Wll©Ml^l vctt, ^JS<D^^l(D«iiam 

J*lb l*HH> (H5-e^-r«J:5^^ Sorol-^f^ff (s_i,t_i, u_i, v_u 
c_i:i«l-6)d^«^$tLTV^o m^ftOfg-^*xA®?g^SPGIl 
— SPGI6J3\ ^#>m— ^^M^^^"s_i*t_i=u_i*v_i mod 

m^-r^^H*iitf^^§P225, ^H#*|i^§l52308a^^**ii(Djtttb 
-C-^^bttTV^^rL^Ni:RCffi-efe«9, ^J^«2"{128}^ifCfo2)o 
n \Z'<Zm%iW<D^tX*h<0, ^!)x.^2"{4}«16^it*U ^I^C#*-CfflV^ 0 
^-iX^xAM^WmS'JT-SPGIDl-SPGIID6li, ^MH©f-^Tis 
M^WSPGIl-SPGI6^^#^6ttfcaS'J^--Cfc«?^ 0>Ri^ ^tl^ 

GiiD6{i, l»i-6-efcott±v^, ftMr?h&\\ ZLm&tkJ&'TZlfmz 
. vert* #4#fF;£iifc3asfeLV \> ^LT, HI37-e^i-J:5 f-, e^I-^r^ 

M^^liSIJ^-S.^-^X^M^mP^iffl.t SPGIID1 , SPGI1 } { SPGII 
D2, SPGI2} • • • {SPGIID6, SPGI6}a>b#6f!H^*X^M^#SPGIIl£ 

2- m^i-5o 

[0127] (2-2)m-^^«i8¥^«2122 

*^AiM^«fe3lSPGin£glfLfc#£\ S:ff^m^m^^^ii3^T^ir 
^LT, ^ff ^gfiSlJ^AIDa— AIDn$r^#i-?>o ^LT, £T S<f ^ffif&SU^-AI 
DaKttUC, ^H^X^?&^icS¥SPGIinc-^*n?)6ffi^^-^X^MSi 
#SPGIl-SPGI6tf>9*»6^ lo©I-^fA|i?g«ii5:I^t5o ^(DlOO 
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lDai£ttl>XM$ll,tz.m%, |g-;»»SPGIii:L (SPGIiJ2SPGIl-SPGI60 

j*®&m&.s_u t_i, u_u w_u c_i%mK, ^MtttL%m%mM%t&!$.3Z' 

x*y=c_i mod N"Zmtz1-£0te2^<Dmmimmx.,yZ^!&1rZ> o ^X,2 

V^o ^OM«gStx, y^&^L-Cte, ^SlJ^^^Cx^^^A^S 
«tbT^UiiS'K^^« M x*y=c_i mod N w «<Z«lHb»x 

Xfy&Rl V >Tv fft#t^4o©i- f!53lj <P ^^^^"mkll = s_i * x mod 
N\ "mkI2=t_i*y mod N\ "mkI3=-u_i*x mod N'\ "mkI4=-v_ 
il *y mod N"Km^Z4W<Dm~mn*FmminkIl, mkI2, mkI3 % mkI4&£ 
^-f So ^bt, ^e<D4{®<D^— (@SlJtfP^SimkIl, mkI2, mkI3, mkI4^blf 

Kat£g<5£, m-liBlJ^f^lii^MKIGa^ltt^k^tfVX -^OBif^^Bif-^^ 
— ffigljif P^HpENCMKIGa=Enc(lKa, MKIGa)£U ^it^M.M&i^AlUa 
^W-^^^CSPGIi^^-t-S^-^xA^^mPliSlJ^SPGIIDiCSPG 

iiDiiii-spGHD6ov^tv55^){c^#{i-?.o ^uc, m<D^mmm.mmi-MB 
b-AiMzM^xhmm^vx, m^km-mwwmmmNCMKiGb, • • e 

NCMKIGn<tU Ztl^tVD&im ^g^SUT-AIDb-AIDnt^-v'^A^^ 
Wf&E^SPGIIDif^i&ttttSo ^b-c, m38-e^-f S:ff ^©f^S'J-^AI 
Da- AIDn& Bf-^blg-flSS'J ^ F^StPENCMKIGa-ENCMKIGn^.^- 
^^A^»PI^SU^^^^ti5^HigBUtf^EMMll]$r^U ^rOjf! 
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[oi28] (3)^^m^^mM^-mm2i5 

[0129] (4)f@SlJtfWBHfflfP216 

fss'jtt#PSB{fgP2i6«, m=mm^m&f&mi2<om~^mmm$i}&mi2 
2frbm=m%mmEMMu\z$:mvtcM&, *<D&=m%m ^emmhi^. gft 

^M23a— 23n^|R]tt-CSaff -TSo 
[0130] <Si^-fe^210Kf^> 

w±-e, mm?f-t^?2i<Dmmz^ ^xmrn^^tc-hK ^xmmft-t^*2 

ffi-SO{^^|iM#^-^^22^tm^Sff^«23a-23nfCiami-5i: 

^^^^212^^H^xA$^^ii:i¥SPGIIlS.tP0H'f@SlJtt^EMMIII^^ 
~fZ>b%<DW)i¥<DWMz.^^xm40^1r7v— ^-y— h£fflWCt&i^i-5 0 
[0131] <«t^=fr-fe^2l^,J;§«i1f^gam^S!j^> 

M-f|5iJW2im, ^H1@BiJ1t^^^2l2^Hl@SiJ1t^^M^REQE 

MMiii^m^-r^o (s2ioi) 

^Hiias'Jtffte^gc2i2«, m4ox^ir£?t£-7v— ^—vcrmxmm^nm 

) ^oT, JgHv^X^&^j&PSPGIII&tf JgHMtf $BEMMIII££/&U 
^H^^^M^WSPGIII^H^XAM^^A^^«§I5215^|±J^ 
U ^Hf®SUi*^EMMIIl^^HWt»^Baff lH5216-tfi^-t-^o (S2102) 
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15\^ *<Dm=isXTJ>m&£&MSPGlll&V~'*22^mm-tZ>o (S2103) 
$REMMIII$r§:{f ^®23a-23n^Ifi{f U mT1rZ> 0 (S2104) 

2121}*, ^frl^lTLSKDfg— i/X7"A§S$g^3£(s_u t_i, u_u v_u c_i:i{Sl 
-6)5^&5, ^-V^AM^#[i¥{SPGIl, SPGI2, SPGI3, SPGI4, SPGI 

5, spgi6}££e!cu ^-^^mm^mmmm^sPGimispGiiu6<D^ 

tl^tUzM^XMJ&^ttZo (S21021) 

m^y^rJ>m^w^U2 1 2 1 6m.<Dm—y^y L ^w^MM%^ 

RXl^—^T^m^WcM(Dm.{SPGlIDl, SPGI 1 } { SPGIID2 N SPGI2} • • • { 
SPGIID6. SPG16}frbttftS^XTJ>&&&ffl&SPGm&&&LX* HHv^ 

TJ>m^^mmM^mmmi5&x^m-^mmm±^m2i2^m^-r^o (S2 

1022) 

^H^^s^»i¥spGiii^ffLfc^-^p^«ii¥^«2i22«, %mm 

(S21023) 

m^y^^m^wmspGm^mvtim-^mmm^M2i22^ i3 
^T^m^^mspGimz.^ti^,6mcom-^y L ^wmmspGii-spGm 

<D?1bfrb. lowf- ^^tMg|ia¥SPGIi(ittl-6)^jl^L, 5{i<Dg|— v-* 
xAM^^s_i^m_i&tJ ; u_i^tPv_iS.t/c_i^44m-t-So (S21024) 

^— f H0#iSI£j&lHS2122te, 5ffi<D^— ^r^ilcsj^ t_u u_i, v_ 
i.c_i^St',^*^X.fe^fiSlK^^C^^; , 'x*y=c_i mod N n %mtcir 
£?ft2o<D{@SUMgbc, y££j&i-5 0 (S21025) 

fg-f F*aS^3=J»2122te N *:<Dmmb&%txRXfiy£RH<^X, W-5-;t^x5 
4o©^- WJ^$^£iCmkIl = s_i*x mod N\ "mkI2=t_i*y mo 



WO 2005/074185 



55 



PCT/JP2005/001359 



d N'\"mkI3=-u_i*x mod N'\"mkI4=-v_il*y mod N"(^<5#4 
m<om— MlfNMfcnkll* mkI2, mkIS, mkI4£r£j&-t-3 0 ^LT. W4l@<D|| 
— W^raStmkll, mkI2, mkI3, mH4;&^1i/££;fr5ia30T^1-«fc?&il— {@ 
S'Jf ra«illMKIGa^^i-^ 0 (S21026) 
ffr-*F^P£f&SfS2122tt\ ffi5»^<5#> ^-ffiSU^WSiPOBt-^^ 

• timmxbnx^t&^mmmmmTKttvx.mvmxz,, (S21027) 

^-^P^«iP^^2122^. ^:-C^fi^g|^SiJ^-AIDa-AIDn^*fb-CBf 
^km-'fHS'J^^lill^S'J^^-Cbtvfeb. ^^821029^^0 <>U ±T<D 

^Xy7 P 21024(CM5o (S21028) 
J|-^^«i»«®2122«,^f^e^UT-AIDa-AIDn^Bt^k^-ffl 
33U *P f^PENCMKIGa— i/*^M^P!ifeSU W£> 

#pgHmifP2i6^tjti^-r5o fct-r-rso (S21029) 

M^X^-/<22<DM)&tMm^\^X®.WZft?o 
[0132] <i^— s<22<Dffi&> 

17— ^22fi, H4ilc*i-J;5lJ:, ^*^S$&2£3&3¥3l^f§ 8B221, 

M^ffc«M&#ft§P222, *^^gf5123, ^H*Mtt^«225, *iHf $& 

<Dmmm->xTJ* 1 ^*5it^*^r«i^^si3 1 23<>; ngc-efcsfc* , -saw js^r »&*r3o 

[0133] (1) ^fA^ftl^MSfl SP221 

iy^A^^#:^^ff^221^,Si^tf^^21^^^Hiy^A^^ 

MMfc^spGiiis&g{futm-a\ smbfc^H^xA^^p^spGnis 

[E|42^rj;9^^^AM^P*&^222^^L, ^«t^gPl23— 

[0134] (2)i/xTJ»wmu%cm&mm22 
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[oi35] (3)m^mmm^U225 

m^.&mmm±}&M225^ n^umnm24t^mmsK^B u 
itm&. *t . -yxTJ*w®&mtmim22KT?±xu m^xTJ*m$smk 

PSPGIII£##U ^tf> tp^^emo^-^^ ASMB^aS'J^t^-^^A 
«Hfcg»3$£r#lffi'f 5,, *rb"C, @ ^^tHfcgaHWM^SPGllDl 

1 % u_l, v_l, c_l&#im-1rZ> 0 t©t, 4o©a&, w, m, n&±f$.1r% 0 

•rttmteif&foZo £L$Cz, w N m, n«\ 0d^.«T, **L^*xl28ir5'HZ>g& 
Sfe-CfeSo *LT, ^*^-^ibtb54o^^»^^; ,, rl=s_l *z+v_l*m 
mod N'\ ,, r2 = t_l*w+u_l*n N\ "r3=u_l *z+t_l *m mod N 
\ "r4=v_l*w+s_l*n N"£Sl^ A^XO^^BxU r2 % r3, x4fr£jij)tt : 
3 C -tUT, £#L,fcB*SHBftrl, r2, r3, r4d^«fi£^tbS, g|20-^-r,fc5ftl#£ 

^^A^^^SU^-SPGIIDl^^tt^o ^Oi^ *ii^raiiSMK§r, ^ 

* 4-*.e>*i«iJ-— >p w«^ks:"smk= 2 * s _i * t_i * (z + w+ c _i 

+n*m)+2* (u_l*s_l*n*z+t_l*v_l*m*w) mod N" {d3£<5V ^ 

ae»»pRG^*nc#itSo ^bT, •ft&omom-^^M^^sij-T-spGiiD 

2-SPGIID6t0— ^-rA^^tKPSPGI2— SPGI6^*fU-C, SPGIIDlt^ 
<mm^ l^3ESg»g»PRG2-PRG6illt#R*^:«ENCSK2-ENCSK6*f^ 
tf?"3„ ^L-C, |g— >*^M^«S'J^SPGIIDl~SPGIID6£l$^i^ 
PRG1— PRG6£Bf^K*#|teNCSKl— ENCSK6a>b&2K BB43-C*i-J:5* 
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mtzgrnmn 1 3a- 1 3n<D&m^&#m®mn 2308a m*5v vr i*-^ b#^r*E 

[0136] (4)*ii«#Efi«P227 

*aW«IHffi227«, ^=*ii«#^K«P225*^H*ii«f«ECMIII*S« 
SfSS«23a-23n— t©SIH#atff«ECMIII«:iBfrr*. 
[0137] <f— /^22<Z>1&^> 

W±T\ ^-^22<D«^oV^t&P^£^ofc;^ r^TMJ— /*22<D»jf£fc:oV > 

£\ ^w-/^22^g;{f ^g23a— 23n^rrfc^*^liSK^SBfa-rS^Oibf^{CO 

[0138] <mmn±>^2i^hm^>^^^wmM^spGms^mvrcm(DWii^ 

> 

PGms&i/xTJ*W&&m&fetiiM222^%1itiU &T1rz> 0 (S2202) 

<f— /<22#5gfl^g23a-23n—. ff^^*liSK?r@H{f i"5NF<^ib^> 
#**£fife»123Hu i«ar«SKS:£fifcU ^H*iim«^fifcSR225^m*-rS 
. (S2251) 

^H*affif#^«B225w:, v^^%mwmmmm.22\z.r^^. m= 

T^^-^X^M^^P^ttaii-^o (S2252) 

I-^f«^ts_i, t_h u_i, v_i, c_i£ttttlU ^tf^ 4o©atz, 
w, m, nSr^t-TSo (S2253) 



WO 2005/074185 



58 



PCT/JP2005/001359 



3?H*iIt# «&fife«S225W:, Wb54oOI*3E3EiS:^fifeS:"rl =s_i * z 

+v__i*m mod N'\ "r2=t_i* w+u_i*n N" % "r3=u_i*z + t_i*m 
mod N\*r4=v_i*w+s_i*n N"£&^ 40<DB#^$tr:U r2, r3, r4£r 
M-f^o (S2254) 

f£H*iifim£/»225te, ^bfcNP^^^rl, r2, r3, r4^H£/&£;ix5, B# 
^^PPRG^^i-^o (S2255) 

Il=*ii1ff$&£j&gf5225ft, #il^rfl«iSMK^, ^ft^X.etlS^-^^^iif 
P^#t£j$5CSMK=2*s_i*t_i* (z+w+c_i+n*m)+2* (u_i*s_i* 
n*z+t_i*v_i*m*w) mod N" KlS^V vr^-fS,, (S2256) 

^=*iHf *S£fiStgP225ft, ^ii^HSMKiC^-^-C gtt&ofc^ltS 
KOB|H§->ft£?Tl\ B£^Jt*:t3iENCSK££j&U WBt^ffc^&ENCSKSr 

m~^^m^mmmi-spGimmxfm^mmpRG\zM^Hi-f^o (S22 

57) 

^H*iHf^^SJ225f* > ^TOm(D^-v'^7 i A^^^:fifeSlJ^SPGIIDl 
-SPGIID6^^b-C, «^^PRGl-PRG6^H|f^t:**liENCSKl-EN 

SlJ^SPGIIDl-SPGIID6(C*J-L-C, B#«|£l¥PRGl-PRG6£l!£^fb5feW0l 
ENCSK1— ENCSK6££$LTV V^ofcb, *xs>:/S2252^M6o (S2258) 
fgH#ffi1f$B£j»225te, M-^^M^^IiS'J^SPGIIDl-SPGIID 
6S.^^^ft?¥PRGl-PRG6S.T^Bt^k**«iENCSKl-ENCSK6 

^H*MW«ECMinsr^b, *int ®mmu227^\mij-rz>o (S2 

259) 

#iItff$&BEff 227ft, g{f mm 23a- 23n^H*®ffif *8ECMIIl£IE{f -T5 0 
^T-TSo (S2260) 

&>±.*K mmn^*TJ*2(DM}&mmx*h%v-s<22<DMf&bm^hz> 0 

, ^ffi^g23a-23n»*figi:«jf^t-oV^|5i^Srmo *1* , S««B23aO# 
Ji£illjft^oV^fft|J3SrfTV\ JfcfcU Sft3£S23aHktf>^{f §£fi23b~23nttf> 
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[0139] <^mmw:23a<Dm^,> 

&#SB2302a, ffiBUI£l&*ft»2304a« {®BiJ*iia«il&»2305a, 5kiitt$&g{f 
lfP2306a, &H#:fr«StfWB2308a, titf>m310, tb^MO&Mo ^x%m 
H{@BUf mmmWLnU2302a, <®B'J$H#»2304a, ffiSiJ^P^|i^lfi52305a 
^ *iltf n&m SP2306a, JgH*W3l&#lH52308a, f*^ff ^g23a@*0^ 
m%mn$LimU2301, W^^1310, {Sgff $eg23a~23n(Cl:ioV>T 

[0140] (l)«9IW«Sfll»230l" 

iBSUti!f#Sm»2301*s, if— /<22d^ f*HMU«##EMMIII«:gteUi:# 

-a% ^mvtc.m^mmmmMM\i\^m^mm^mmmmmm302a^m^^ 

o 

[0141] (2)&HiBBU*WM8$##*B2302a 

5gHfflglJ^ra^*#W2302att,ffiglJW#S{iaS2301d^^HfflBiJffif*E 

MMm^mutm^. ^-rm47K^-rx^Mm^mu2304a^it>^mmm 
mi&AiD a Rxfm%miKa*i$Lm-rz> 0 ^lt, sft utm^mmmmEMMm 

^b^— *W«»ENCMKIGaSrSl#i-5. {SBUStlKa-lrgl^ WF.-£ft3l5 

• - f raftPENCMKIGa^m^b^tf V \ fg- f Pfl«^MKIGa&tf Sg-^*^ 
A^S«a£«fe«»BlJ^-SPGIIDi*5t#"t-«, ft&K. ^^^-^^SiPMKIGa^. 

w^gij^-spGiiDi^, H48-e^-ra;5^fisij f mmmm 

giJ2305a^l-t&i^-r^o 
[0142] (3)fflBU«tt&*WB2304a 

#iBij«i*&«ftgp2304a«, m47x^-rxo^ Btmmmm^AiDaRxm&\m 

KaSrfiW*fc<0-CS>5. 
[0143] (4)fflBy*M«»iW*|S2305a 

fflBU*KI»l»i(ftW2305ari, 048-C^i-J:5K, &HHBU + IB«8£MKIGa.R. 
^->>^A^^^fifcBiJ^SPGIIDiSr^i-5t^-e*>5o 
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[0144] (5)#affif«£f9»2306a 

*5iif#SfSIW2306a35^^w<22*»5>IBH*afflf«ECMIIlS:Sf9Lfc»^» 
* P^l^i»2305afcT^ir*U f&HBB'J + ftag&gMKIGa&TJ^-^X 

^b*^«teNCSKi^aWi-5 0 *HliJW*IBIWSMKIGa3tVI«JB»[ 
»PRGiRW^k**«NCSKiS^H**«i5l#«|J2308a^ai*i-«. 
[0145] (6)£H2WBlfc#8|S2308a 

^H*#Si^#gB2308ad^*aif^S:lf^2306a^^^-^SlJ c praSiPMK 

agjR»PRGii»6», l«»rl> r2, r3, r4£rt*tU-r5o £HBBU*liW«i¥ 
MKIGa^bM— •fiEWfl^mkll, mkI2, mkI3, mkM^ffi-TSo -£<Z>^ 
^-*.£>*t5gffi ^@*ii t Frai^£^"SMK= (rl + mkll) * (rl+mkI2) + (rl 
+mkI3) * (rl+mkI4) mod N"«r*l^ #a^HHtSMK^^frr5. .*UC* 
^KLfc*a*IBI«SMKSrSl- r ■t-^fb*^T»ENCSKiSr«^kU **«iSK 
^#-r^ 0 ^bT, ^O**|iSK^tH^SiJ1310^|ll^-r^o 

[0146] <$:mmmza<om*fe> 

4 J r^ll#MKIGa^#i-SI^Oll)f^^oV^-Cll|49^^•r7CI-^•^r-^^V^T 

t&pj-r ^=#a««ECMiiisrSflr-u^#i::x ^—(ssu^ra^MKi 

[0147] <«*^^21**e>JBHfflJ3lJ«f*REMMIIlS:Sfibfel*0»f^> 

«i|gfT^^21^^H^SIJ^^EMMIII^fiUfe«SUifilSWSP2301fi 

, ^HlSSiJIf ^EMMIII^mHffiS'J4 , ra«iP^#§l52302a-(±l^1-5o (S2301) 
^H{0SIJ ft#EMM1II&£{gUfc£HfflgiJ f Ffl#tP^#la523 02a(4 > ffi£Utt$ 
J^glS2304ad^^ff^Sli^ l J^AIDaS.t^ffiSlJ^IKat:^#-r5c (S2302) 
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teM2304fc*a-i&teft^^ 

«iENCMKIaS.T^m-^7 i AM^WIiSiJ^-SPGIIDa^m#'f-2.o (S2303 
) 

^Hj@SiJ4 J P^«i#^#SP2302a(i, ^U«i&M2304}iI&i&te;h,TWcffiSiJ 
mm.a\zm^. Bt^k^-^ra^ENCMKIaO«^t:^m\ £-*l8J«MKI 
a^#i-5 0 (S2304) 

M^mWl * ra«t£8tfSSB2302aW\ flMBSU * P^StPMKIGa&t^l-v^X 
AjBWft 3E«»«BiJ^SPGnDaSMH33U ™i»&*rtg&2305a{£*&*rt'rs„ ^Tl"^o 
(S2304) 

<f-w<22*»e>^=*iiffif«ECMIllSrSf5b^:l*C)»f^> 
^-/<22*^fRH*ii«#ECMlll^S:fiLyh*iiffif#S{5»2306ari, tiS'J 
^^ltl&ifrt^23O5a^^^-ffiBWP^Si»MKIGa^^0-v'^AM^W 

JRgiJ^f SPGnDaS:5l#-r5o (S2351) 

*iifif#Sf9W2306att, ^H^att^ECMIIKD^*^, |g-v^7^M^ 
^aSU^SPGIIDalC^-T^^-^X^M^WIiS'J^SPGIIDat-iS: 
i-*l*^^^PRGi&l5liF#'ffc**«ENCSKiSrttffi-t-S. (S2352) 

#S:ft gB2306ate, &HBSU «PKI»»MKIGaRtW**^t»C«PRGiS. 
pf^b*^"»ENCSKiSr^H*^r«*#«|J2308a^m^-rS. (S2353) 
^H*^T«5l#«P2308att, B#^!«PRGi^b, B#l£^ffcrl, r2, r3. r4£ 
ftjm-TSo (S2354) 

mH*^«i^#l^2308a«,m-ffiSU4'F5WMKIGa^^^-'f®S'J c l 3 F^^nik 
II, mkI2, mkI3, mkI4^rttaii"So (S2355) 

= (rl+mkll) * (rl+mkI2) + (rl+mkI3) * (rl+mkl4) mod N'SrSfC, 
W«iSMKSr^fi!c-r*o (S2356) 
^H*^f«i^#^2308a{*, ^Ufc*iif ffi«ISMKS:SJC % Bf *ffc*#«E 
NCSKi&fc-H-ffcU *#«tSK^^#-T6o (S2357) 
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S&H5fc*«&&#gB2308ate, Z<D&#mSK&MJ)m3l0^Mjj1rZ> o (S235 
8) 
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